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The present invention concerns communication systems in which, in 
order to improve the fidelity of the transmission, the data to be transmitted are 
subjected to a channel encoding. It concerns more particularly a decoding 
method, as well as the devices and apparatus adapted to implement this 
5 method. 

It will be recalled that so-called "channel" encoding consists, when 
the "code words" sent to the receiver are formed, of introducing a certain 
amount of redundancy in the data to be transmitted. More particularly, by 
means of each code word, a predetermined number k of information symbols 

10 are transmitted which are chosen from a predetermined "alphabet" of finite 
size q ; to these k information symbols are added a number {n-k) of so-called 
"parity" symbols, taken from the same alphabet, so as to form code words 
c = (01,02,..., c n ) of length n ; the set of the rules for calculation of the parity 
symbols as a function of the information symbols defines a "code", or "encoding 

15 method", of "dimension" k and "length" n } thus characterized by a certain 
number of code words constituting a sort of dictionary. A code may be 
conveniently defined by means of a matrix H, of size (n-k)xn, termed "parity 
matrix": a word c of given length n is a code word if, and only if, it satisfies the 
relationship: H • c T = 0 (where the exponent T indicates the transposition). 

20 At the receiver, the associated decoding method then judiciously 

uses this redundancy to detect any transmission errors and if possible to correct 
them. There is a transmission error if the difference e between a received word 
rand the corresponding code word c sent by the transmitter is non-zero. 

More particularly, the decoding is carried out in two main steps. 

25 The first step consists of associating an "associated code word" with 

the received word. To do this, the decoder first of all calculates the "error 
syndrome" s = H - r T = H ■ e T . If the syndrome is zero, it is assumed that no 
transmission error has occurred, and the "associated code word" will then 
simply be taken to be equal to the received word. If that is not the case, it is 

30 thereby deduced that some symbols in the received word are erroneous, and a 
correction algorithm is then implemented which is adapted to estimate the value 
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of the error e ; the algorithm will thus provide an estimated value e such that (r_- 
e) is a code word, which will then constitute the "associated code word". 

The second step simply consists in reversing the encoding method, 
that is to say in removing the redundant symbols from the "associated code 
5 word" to retrieve the initial information symbols. 

More particularly, the invention concerns the first of these two steps, 
and the conditions for implementation of the correction algorithm. 

The purpose of a correction algorithm is to associate with the 
received word the code word situated at the shortest Hamming distance from 

10 this received word, the "Hamming distance" being, by definition, the number of 
places where two words of the same length have a different symbol. Each code 
thus provides an error correction capacity which is limited by the shortest 
Hamming distance between any two code words, which is termed the "minimum 
distance" of the code d ; more particularly, when the chosen correction 

15 algorithm is used to find the position of possible errors in any received word, 
and to provide a replacement symbol for each of these positions, one can be 
sure of being able to optimally correct INT[(cM)/2] errors for a code of minimum 
distance d("INT" designates the integer part). If the received word contains a 
number of errors strictly greater than INT[(d-1)/2], the algorithm will in certain 

20 cases capable of proposing a correction, but it will then of course be very 
doubtful that such a correction will be right, that is to say that the associated 
code word really is the code word sent by the transmitter. 

The capability of a correction algorithm to propose a correction of a 
received word is faithfully represented by the formula: 

25 2t = A, 

where t is the number of erroneous symbols in the received word, and A is a 
strictly positive integer which we will call the "solving capability" of the algorithm. 
If the value of (2f) is less than or equal to the solving capability, the correction 
algorithm will be capable of correcting the received word. If the value of (2t) is 
30 greater than the solving capability, the algorithm can: 
- either simply fail in its correction attempt, 
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- or be capable of proposing a correction of the received word; in this 
case, if that correction is accepted, the risk is taken of it being erroneous, i.e. 
that the code word proposed is not in fact the word sent; clearly, the greater (2f) 
is with respect to A, the higher the risk. 
5 Taking into account the above considerations concerning the 

minimum distance d of the code, the algorithm considered will be said to be 
"maximum" if 

A = d-1, 
and "sub-maximum" if 

10 A<d-1. 

Among known encoding methods, "Reed-Solomon" codes may be 
cited, which are reputed for their efficiency. These codes, however, have the 
particularity that the length n of the code words is necessarily less than or equal 
to the size q of the alphabet of the symbols. On account of this, if a Reed- 

15 Solomon code is desired having code words of great length, high values of q 
must be envisaged, which leads to costly implementations in terms of 
calculation and storage in memory. Moreover, high values of q are sometimes 
ill-adapted to the technical application envisaged. 

However, for modern information carriers, for example in recordings 

20 on CD ("compact discs") and DVD ("digital video discs"), it is sought to increase 
the density of information. When such a carrier is affected by a physical defect 
such as a scratch, a high number of information symbols may be rendered 
unreadable. This problem may nevertheless be remedied using very long code 
words. For this reason, it has been sought to build codes which naturally 

25 provide words of greater length than Reed-Solomon codes. 

In particular so-called "algebraic geometric codes" or "Goppa 
geometric codes" have recently been proposed (see for example "Algebraic 
Geometric Codes " by par J. H. van Lint, in "Coding Theory and Design Theory " 
1 st part, IMA Volumes Math. Appl., volume 21, Springer-Verlag, Berlin, 1990). 

30 These codes are constructed from algebraic curves defined on the basis of an 
alphabet of q elements structured into a Galois field. An important parameter of 
such a curve is its "genus" g. In the particular case where the curve is a simple 
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straight line (the genus g is then zero), the algebraic geometric code reduces to 
a Reed-Solomon code. In certain cases, algebraic geometric codes make it 
possible to achieve a length equal to {q^2g^[q) 1 which may be very high; for 
example, with an alphabet length of 256 and a genus equal to 120, code words 
5 are obtained of length 4096. 

Algebraic geometric codes are, as has been said, advantageous as 
to the length of the code words, but they have the drawback of requiring (on the 
basis of current knowledge at least) decoding algorithms that are rather 
complex, and thus rather expensive in terms of equipment (software and/or 

10 hardware) and processing time. This complexity is in fact greater or lesser 
according to the algorithm considered, a greater complexity being in principle 
the price to pay for increasing the error correction capacity of the decoder, (see 
for example the article by Tom Hoholdt and Ruud Pellikaan entitled "On the 
Decoding of Algebraic-Geometric Codes", IEEE Trans. Inform. Theory, vol. 41 

15 no. 6, pages 1589 to 1614, November 1995), 

It should be noted that for these algorithms, only a lower bound of 
their solving capability A is available, except in the "trivial" case of the maximum 
algorithm for correction of Reed-Solomon codes (called the "Berlekamp-Massey 
algorithm"), for which the solving capability is precisely known and is equal to 

20 A = n-k. A generalization of this algorithm to non-zero algebraic geometric 
codes, termed "basic" algorithm, has been proposed by A.N. Skorobogatov and 
S.G. Vladut in the article entitled "On the Decoding of Algebraic-Geometric 
codes", IEEE Trans. Inform. Theory, vol. 36 no. 5, pages 1051 to 1060, 
November 1990), this algorithm provides a solving capability at least equal to 

25 A = n-k-2g. 

However, the minimum distance d for a algebraic geometric code is 
at least equal to («-£ + 1-g). It is thus clear that the basic algorithm is "sub- 
maximum", and this is all the more so the greater the genus g of the algebraic 
curve. With the aim of improving the solving capability, Skorobogatov and 

30 Vladut proposed, in the same article cited above, a "modified" version of the 
"basic" algorithm. This "modified" algorithm has a solving capability at least 
equal to A = n-k-g-s , where s is a parameter dependent on the algebraic 
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curve chosen, which may furthermore sometimes be zero (this is the case for 
example for so-called "hyperelliptic" algebraic curves. 

The basic algorithm proceeds essentially in three steps: 

1) constructing a "syndromes matrix" S, of size (n-k) x (n-k), of 
5 which each coefficient S,y, where j is less than or equal to a "boundary" value 

w{i) } is equal to a linear combination judiciously chosen of the elements s v 
(v = 1,2,.. .,n-k) of the syndrome s, the coefficients S,y beyond the boundary 

remaining indeterminate, 

2) identifying the position of the errors in the received word, by solving a 
10 certain number of linear equations of which the coefficients are taken from the 

syndromes matrix S, and 

3) correcting the erroneous symbols of the received word of which the 
position is now known. 

The modification introduced by the modified basic algorithm consists 
15 in a new mode of operation for the second step of the algorithm. More 
particularly, for any integer p, between 1 and (n-k), the following system of 
linear equations is considered: 

J^hSg =0, fory= 1,2 w(\i) 9 (1) 

where the values of the unknowns l t are to be found in the same 
20 alphabet of symbols as the elements of the code words. An integer X 0 is then 
sought which is the smallest value of for which such a system has a non-trivial 
solution, that is to say a solution where the coefficients /, are not all zero. 

Skorobogatov and Vladut thus teach to consider successively and 
independently the sub-matrices of S size |u x first for equal to 1 , then for 
25 \x equal to 2, and so forth until one is found for which the lines are linearly 
dependent. 

However, a question which is important from a practical point of view 
and which must be posed in relation to any calculation algorithm, is that of its 
complexity, that is to say the number of arithmetical operations which it 
30 requires. It can be shown that the solution of the modified basic algorithm, as 
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succinctly described above, requires of the order of n 4 arithmetical operations 
(in the symbols alphabet), where n is, it should be recalled, the length of the 
codewords. However, the complexity of the basic algorithm is only of the order 
of n 3 . In this manner the increase in the solving capability according to this 
5 approach is thus made at the cost of an increase in complexity. 

The object of the present invention is in particular to find a decoding 
algorithm which has a solving capability at least equal to that of the modified 
basic algorithm for the same code, but of which the complexity is as low as 
possible, and increases at most proportional to n 3 . 

10 The article of I.M. Duursma entitled "Algebraic Decoding using 

Special Divisors" (IEEE Transactions on Information Theory, vol. 39, n° 2, 
pages 694 to 698, 1993) proposes an improvement (termed "extended modified 
algorithm" by the author) to the modified basic algorithm, adapted to reduce its 
complexity. Duursma shows that in general a plurality of values of \i may exist 

15 for which the system (1) has a non-trivial solution, and for which the complete 
decoding algorithm has the same solving capability as the modified basic 
algorithm. We will use the term "solving dimension" X to refer to a value of n 
having that property, such that the value X 0 mentioned above is re-defined as 
being the smallest of these solving dimensions. Moreover, the cited article 

20 shows that there is at least one solving dimension whose value is greater than 
or equal to a certain integer, which we will refer to as "Duursma's minimum" jj. d 
(for the calculation method for ji d . that article may be referred to). We will use 
the term "extended dimension" X D to refer to the smallest of these solving 
dimensions greater than or equal to |x D (^d can furthermore occasionally be 

25 equal to the smallest solving dimension Xo). 

Consequently, according to the extended modified algorithm, it is 
sought to solve the system (1) by considering, as in the basic modified 
algorithm, successive values of \i, but by beginning that search at n = n D - The 
complexity of the extended modified algorithm increases proportional to gn 3 , 

30 however, generally, the genuses g of the algebraic curves used for the 
encoding may be high numbers: this is because to be able to construct codes 
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that are increasingly long often gives rise to the use of algebraic curves of 
increasingly high genus. 

Decoding algorithms for algebraic geometric codes of which the 
complexity increases proportional to n 3 have been proposed using a different 
5 approach to that of the modified algorithm. 

The article of G.-L Feng and T.R.N. Rao entitled "Decoding 
Algebraic-Geometric Codes up to the Designed Minimum Distance" (IEEE 
Transactions on Information Theory, vol. 39, n° 1, January 1993) discloses such 
an algorithm. In that algorithm, the system of linear equations of the basic 

10 algorithm is solved (see step 2) above), after having determined according to a 
certain rule the elements unknown a priori of the syndromes matrix (see step 1) 
above). However, the calculation of these complementary elements of the 
matrix S is complicated, and consequently, even if the complexity of that 
algorithm increases proportional to n 3 , the actual number of operations (equal to 

15 C n 3 , where C is a constant of high value) is very high. 

The article of R. Kotter entitled "Fast Generalized Minimum-Distance 
Decoding of Algebraic-Geometry and Reed-Solomon Codes" (IEEE 
Transactions on Information Theory, vol. 42, n° 3, May 1996) also discloses 
such an algorithm. In this one, a solution is sought for all the systems of linear 

20 equations conforming to the basic algorithm, whereas just one would suffice. 
Here too the result is a complexity equal to C- n 3 , where C us a constant of high 
value. 

However the authors of the present invention have discovered, 
contrary to what may have been thought at first sight, that it is in fact possible - 

25 at least in relation to algebraic geometric codes of so-called "one-point" type - 
to define a decoding algorithm of complexity proportional to a? 3 , with a constant 
of proportionality of the order of 1 , while keeping to the general philosophy, and 
the solving capability, of the modified basic algorithm of Skorobogatov and 
Vladut (for a definition of "one-point" algebraic geometric codes, reference may 

30 be made for example to the article by Tom Hoholdt and Ruud Pellikaan cited 
above). The invention demonstrates this by providing an algorithm in which the 
calculations are organized judiciously to that end. More particularly, the 
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invention teaches how it is possible, when it is sought to solve the system of 
equations (1) for a given value |n 0 of \x t to take into account certain information 
resulting from unsuccessful attempts to solve the system (1) for values of p, less 
than |i 0 (except for ja 0 = 1); by exploiting this information, the invention makes it 
possible to considerably reduce the complexity of the calculations required 
when it is attempted to find a solution for the value \xq. 

Thus, according to a first aspect, the invention relates to a method of 
decoding a one-point algebraic geometric code of dimension k and length /?, in 
which, in order to identify the position of the errors in a received word, the 
syndromes matrix S, of size (n-k) x (n-k), is defined, of which the elements 
Sfj of each line / are calculated, for j between 1 and where the boundary w 
is a decreasing function, using the syndrome s of the received word, said 
method being remarkable in that it comprises matrix construction steps 
numbered by u, during which matrices S" are constructed starting with S 1 = S, 
and in that each matrix S u for u > 1 is obtained from the matrix S"" 1 by 
performing : 

- where appropriate, permutations on the columns of the matrix S u '\ then 

- linear manipulations involving the line of index u of the matrix so. 
obtained, 

and in that the construction of matrices terminates when: 

- either S" u j = 0 for all j between 1 and w(u), 

- or there is an integer u* < such that S°Vy = 0 for all j between 1 and 

w(u). 

"Linear manipulation" involving a line means the replacement of this 
line by a linear combination of itself with one or more other lines. 

The general principle of the method according to the invention is 
inspired by the so-called "Gauss pivot", taking care to operate only on known 
elements of the matrix S, that is to say those situated within the "boundary" 
represented by the function w. As described in detail below, this approach 
provides the coefficients //associated with a solving dimension X, with a 
calculation complexity which is only of the order of n 3 . 
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Naturally, the method according to the present invention also makes 
it possible to determine values of solving dimensions. Thus, according to the 
same first aspect, the invention also relates to a method of decoding an one- 
point algebraic geometric code of dimension /cand length n, in which, in order to 
5 identify the position of the errors in a received word, the syndromes matrix S, of 
size (n-k) x («-£), is defined, of which the elements Sy of each line / are 
calculated, for j between 1 and w(i), where the boundary w is a decreasing 
function, using the syndrome s of the received word, said method being 
remarkable in that it comprises matrix construction steps numbered by u, during 
10 which matrices S" are constructed starting with S 1 = S, and in that each matrix 
S" for u > 1 is obtained from the matrix S"~ 1 by performing : 

- where appropriate, permutations on the columns of the matrix S""\ then 

- linear manipulations involving the line of index u of the matrix so 
obtained, 

1 5 and in that the last step is: 

- either the step number u = X, if an integer X is determined such that 
S\ = 0 for all j between 1 and w(X), 

- or the step number u = (X -1), if an integer X and an integer u* are 
determined, with u* < X, such that S"V; = 0 for all j between 1 and w(X). 

20 As may be seen, taking into account the "boundary" w plays a central 

role in the invention. A notable property of algebraic geometric codes is that the 
function w always decreases (in the broad sense) when the parity matrix H is 
constructed in a canonical manner (if this is not the case, it suffices to re- 
arrange accordingly the order of the lines of the matrix S before implementing 

25 the decoding method according to the invention. Thus let i/ max be the index of 
the first line for which w(u m ax) is less than u max . The system (1) for ^ = cy max then 
comprises more unknowns than equations: thus of course it has a non-trivial 
solution. It may be deduced from this that there is necessarily a solving 
dimension of value less than or equal to u max . In the calculations it is 

30 consequently of no use to keep the lines of index greater than tv max in the 
matrices S u . The complexity of the calculations and storage will thus preferably 
be reduced by cutting off the number of lines of each matrix S u at t/ max . 
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According to the basic modified algorithm, or according to the 
extended modified algorithm, after having calculated a set of coefficients /,-, the 
" error-locating polynomial " is formed, the roots of which serve to find the 
position of the errors in the received word. The present invention is, 
5 advantageously, compatible with this known method of locating transmission 
errors. 

According to particular features, the number of columns of each 
matrix S° is cut off at w(u). The algorithm according to the invention then 
provides the smallest solving dimension X 0 and the associated coefficients /, . 
0 An advantage of this embodiment is that the error-locating polynomial which 
results from it has a minimum number of coefficients. 

According to other particular features, the number of columns of each 
matrix S u is cut off at w(hd) for u between 1 and Duursma's minimum and at 
w(u) for (the case arising) u greater than n D . The algorithm according to the 
5 invention then provides the extended dimension X D and the associated 
coefficients . An advantage of this embodiment is to give rise to a reduction in 
storage, since the matrices S" can only include w(n D ) columns for u between 1 
and no, and w(u) columns for u greater than |a D . 

According to another of its aspects, the invention concerns various 

devices. 

It thus firstly relates to an error correction device for decoding a one- 
point algebraic geometric code of dimension k and length n, adapted to identify 
the position of the errors in a received word, and comprising means for defining 
the syndromes matrix S, of size (n-k)x(n-k), of which the elements Sy of 
each line / are calculated, fory between 1 and w(i), where the boundary w is a 
decreasing function, using the syndrome s of the received word, said error 
correction device being remarkable in that it further comprises means for 
constructing matrices S u numbered by u, with S 1 = S, each matrix S" for u > 1 
being obtained from the matrix S"" 1 by performing : 

- where appropriate, permutations on the columns of the matrix S""\ then 
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- linear manipulations involving the line of index u of the matrix so 
obtained, 

and in that it comprises means for stopping the construction of the matrices when: 

- either S u uj = 0 for all j between 1 and w(u), 

5 - or there is an integer u* < (i/-1) such that S^Vy = 0 for all j between 1 and 

w(u). 

Preferably this error correction device will further comprise means for 
cutting off the number of lines of each matrix S u at i/ max , where i7 max is the 
smallest integer / for which w(i) is less than /. 
10 According to particular features, the error correction device further 

comprises means for cutting off the number of columns of each matrix S u at 
w(u). 

According to other particular features, the error correction device 
further comprises means for cutting off the number of columns of each matrix S u 
15 at w(\x D ) for u between 1 and Duursma's minimum ^d, and at w(u) for (the case 
arising) u greater than \iq. 

The advantages of these error correction devices are essentially the 
same as those of the methods complementary thereto described succinctly 
above. 

20 The invention also concerns, secondly, a decoder comprising: 

- at least one error correction device as described succinctly above, and 

- at least one redundancy suppression device. 

The invention also relates to: 

- an apparatus for receiving encoded digital signals comprising a 
25 decoder as succinctly described above, as well as means for demodulating said 

encoded digital signals, 

- a computer system comprising a decoder as succinctly described 
above, and further comprising at least one hard disk, and at least one means for 
reading that hard disk. 

30 - a non-removable data storage means comprising computer program 

code instructions for the execution of the steps of any one of the methods 
succinctly described above, 
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- a partially or wholly removable data storage means comprising 
computer program code instructions for the execution of the steps of any one of 
the methods succinctly described above, and 

- a computer program containing instructions such that, when said 
5 program controls a programmable data processing device, said instructions 

lead to said data processing device implementing one of the methods succinctly 
described above. 

The advantages provided by this decoder, this reception apparatus, 
this computer system, these data storage means and this computer program 
10 are essentially the same as those provided by the methods according to the 
invention. 

Other aspects and advantages of the invention will emerge from a 
reading of the following detailed description of particular embodiments, given by 
way of non-limiting example. The description refers to the accompanying 
15 drawings, in which: 

- Figure 1 is a block diagram of a system for transmitting information 
using a channel encoding according to the invention, 

- Figure 2 is a list of monomials which form a basis for a function vector 
space in two variables associated with an algebraic geometric code presented 

20 here by way of example, 

- Figure 3 shows the first 13 lines of the syndromes matrix S in this 
same code, 

- Figure 4 is a flow chart representing the initial steps of a method of 
correcting errors according to the invention, 

25 - Figures 5a and 5b are flow charts representing the following main 

steps of that method of correcting errors according to the invention, and 

- Figure 6 shows an apparatus for receiving digital signals incorporating 
a decoder according to the invention. 

Figure 1 is a block diagram of a system for transmitting information 
30 using a channel encoding and decoding according to the invention. 

The function of this system is to transmit information of any nature 
from a source 100 to a recipient or user 109. First of all, the source 100 puts 
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this information into the form of symbols belonging to a certain alphabet (for 
example bytes), and transmits these symbols to a storage unit 101, which 
accumulates the symbols so as to form sets each containing k symbols. Next, 
each of these sets is transmitted by the storage unit 101 to an encoder 102 
5 which adds {n-k) redundant symbols, so as to construct a code word of length 
n. 

The code words so formed are next transmitted to a modulator 103, 
which associates a modulation symbol (for example, a complex amplitude) with 
each symbol of the code word. Next, these modulation symbols are transmitted 

10 to a transmitter or to a recorder 104, which inserts the symbols in a 
transmission channel. This channel may for example be constituted by a wired 
transmission or wireless transmission such as a radio signal, or by storage on 
an appropriate carrier such as a DVD or a magnetic tape. This transmission 
arrives at a receiver or a reader 105, after having been affected by a 

15 "transmission noise" whose effect is to modify or delete certain of the 
modulation symbols at random. 

The receiver or reader 105 then transmits these symbols to the 
demodulator 106, which transforms them into symbols of the alphabet 
mentioned previously, of which each set constitutes a "received word". The 

20 received word is next processed by an error correction unit 107, which 
implements a decoding method according to the invention, so as to provide an 
"associated code word". Next, this associated code word is transmitted to a 
redundancy suppression unit 108, which extracts from it k information symbols 
by implementing a decoding algorithm that is the reverse of that implemented 

25 by the encoder 102. Finally, these information symbols are supplied to their 
recipient 109. 

Units 107 and 108 can be considered to form conjointly a "decoder" 

10. 

The method of error correction according to the invention will now be 
30 illustrated, with the aid of a digital example. Note that this example does not 
necessarily constitute a preferred choice of parameters for the encoding or 
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decoding. It is provided here to enable the person skilled in the art to understand 
more easily the operation of the method according to the invention. 

An algebraic geometric code will thus be considered with parameters 
(512, 480) defined as follows. 
5 The alphabet of the symbols is constituted by the 256 elements of the 

Galois field F 256 . Each non-zero element of this field is equal to a power, between 
0 and 254, of one of its elements, denoted y, which satisfies the equation 

Y 8 + Y 4 + y 3 + y 2 + 1 =0, 

which implies that: y 255 = 1 . 
10 The following "algebraic curve" is then considered of genus g = 8 

constituted by the set of the solutions of the equation with two unknowns 

y 2 + y + x 17 = 0 (2) 

over F 25 6 (this equation being of degree 2 in y, it is said to be "hyperelliptic"). These 

solutions, of which there are 512, constitute the "points of the curve", for example: 
15 p, = (yV 5 ), P 2 = (y 0 ,y 170 ), P 3 = (y\y 119 ), P 4 = (y'V 53 ), P 5 = (yV 1 ), 

Psoe = (y 253 ^ 93 ), P509 = (y 254 ,/ 4 ), P510 = (y 254 ,^ 24 ). P511 = (0, y°), P 5 i 2 = (0,0). 
Each point P, serves to identify the /-th element of any code word; this is 
why n = 512. 

20 Next, a set of monomials hi (/' =1 32) in x and y is chosen, of which 

the list is given in Figure 2. These monomials constitute a basis for a vector space 
LF of polynomials in x and y with coefficients in F 25 6. The choice of the functions /?, 
is not random, but obeys certain criteria which define the so-called "one-point" 
algebraic geometric codes. 

25 Finally, the parity matrix H of the code is defined in the following 

manner: the element in line / and column j of that matrix is equal to the value of the 
function /?, at point P s of the algebraic curve. Thus, n - k =32, and so k = 480. For 
example, taking into account that y 255 = 1 , the twelfth line of the matrix H is: 
fti 2 (Pi) = y 85 , h, 2 (P 2 ) = y 170 , A7 12 (P 3 ) = y 120 , /7 12 (P 4 ) = y 154 , 

30 

/?12(P 5 10) = Y 223 . /J12(P 5 11) = 0, /?1 2 (P 512 ) = 0, 

since h\ 2 - *y. 
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The code having been chosen, it will now be shown how to build the 
syndromes matrix S. 

Consider the 32 x 32 products of a function ft, by a function h h defined 
modulo the equation of the algebraic curve (equation (2)). 
5 Certain of these products are equal to an alignment of the vector space 

LF. For example: 

h&h 7 = x 5 * x 6 = x 11 = /? 15 , h w hw = y ■ y = y 2 = x 17 + y = h 2 7 + A?io- 
In such cases, we write 

v=1 

1 0 and the element of the matrix S is defined by 

SrZ^v • (3) 

v=1 

The order of the functions ft, has been chosen such that, for any value 
of /, the product of h t by hj belongs to LF for all the values of j between 1 and a 
certain limit w(i), where w{i) is a decreasing function. In the digital example 
15 considered (see Figure 2), w(i) becomes less than / from / = t/ max =13, with 
w(u max ) = 12. 

On the other hand, certain products hjhj do not belong to LF. This is the 
case, for example, for 

h 6 h 2 9 - x 5 ■ x 18 = x 23 , and for: h u h^ = x 12 - y . 
20 In such cases, it is not in fact necessary to define the value of the 

corresponding element S$. This is because the algorithm according to the 
invention, of which a description will be found below, does not use the elements Sg 
for which j is less than or equal to w(i). This function w thus represents a 
"boundary" between the elements calculated according to equation (3), which fill 
25 the upper left corner of the matrix S, and the indeterminate elements of that matrix 
(see Figure 3, which represent the first 13 lines of the matrix S). 

As was indicated earlier, the algorithm according to the invention 
uses linear manipulations of the lines. It will be recalled that the linear 
manipulations of the lines of a matrix Z to obtain a matrix 2' may be represented 
30 by the pre-multiplication of the matrix £ by a reversible matrix /_, i.e. 
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r = l z. 

Let \x be the number of lines of E, and let L be the matrix with \x 
columns which makes the elements of the line a of E' zero from the column y = 1 
to the column y = w(\x). In other words, L satisfies: 

5 0 = r aj = (L Z) ay = S^a/^- , fory = 1,2,...,^). 

7=1 

If we then define 

/-Lai (/= 1.2,... f »i) , (4) 
it will be seen that we have obtained 

10 as desired (system of equations (1)). Thus, the numbers /, sought form the oc-th 

line of L. However, L may of course be written 
L = LI , 

where I is the identity matrix, such that in practice L is obtained by applying to 
the identity matrix the same linear manipulations of lines as those which are 

1 5 applied to the matrix E to obtain E\ 

The linear manipulations implemented during the course of the 
algorithms presented below by way of example, operate, for increasing values 
of the iteration variable u, on the line S[u] of index u of the matrix S u , starting at 
u = 2. The same linear manipulations are applied successively to the identity 

20 matrix I, of which the lines resulting from these manipulations are denoted L[u]. 
The line S[u] operated upon is replaced by the sum of that same line and of a 
preceding line of index / < u multiplied by an appropriate coefficient; 
conventionally, these operations, completed according to needs by 
permutations of columns, are adapted to progressively transform the matrix S 

25 into a triangular matrix (with zeros in the bottom left corner). The algorithm 
terminates when a matrix is found which has a line of index less than or 
equal to X whose elements are zero over the first w(X) columns. 
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With reference to Figures 4, 5a and 5b, a first embodiment of the 
invention will now be described, in which Xo is calculated, which, it may be 
recalled, is the smallest value of ja for which the system (1) has a non-trivial 
solution. In this embodiment, each matrix S u has a number of columns equal to 
5 w(u). 

Figure 4 is a flow chart representing the initial steps of an error 
correction method according to the invention, which is implemented each time 
the error correction unit 107 takes a new received word (in the form of a series 
of symbols belonging to said alphabet) at step 196 of that method. 
10 First, at step 197, the error syndromes of the received word are 

calculated, that is to say the (n-k) components s v of the vector, 
s = H r T , 

then, at step 198, these syndromes are inserted into the matrix S constructed 
according to equation (3) and cut of at u ma x lines (as in Figure 3). The matrix L is 
1 5 initialized to the identity matrix of dimension t/ max - 

The integers u and v respectively represent the current line and 
column indices. The role of the integer u* will be explained below. 

It is then sought to place the first Gauss pivot in position S^^. If the 
value initially present is already non-zero, as verified at step 199, the sub- 
20 algorithm A is proceeded to (step 200). Otherwise, the sub-algorithm B is 
proceeded to (step 300). 

The rest of the algorithm is constituted by a series of steps, in which 
each step consists either of applying the sub-algorithm A, or of applying the 
sub-algorithm B. 

25 The sub-algorithm A, which is illustrated in Figure 5a, serves 

essentially to go down one line in 11 S " (step 201). 

Step 202 represents a stop test of the algorithm which will be 
explained further on. If the algorithm must be continued, the new line is 
manipulated (step 204) so as to cancel its elements situated in the first (u-1) 

30 columns. The matrix S u has thus been obtained for the value u considered. 
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At step 205, the current number of lines u is compared with the 
current number of columns v. If it turns out that u is greater than v, the sub- 
algorithm B is proceeded to (step 300). 

If u is less than or equal to v, then at step 206 the line u is gone 
through for columns j > u, to search for the first non-zero element. 

If one is found before the column of index (t/+1), the calculation of the 
matrix S" +1 is commenced exchanging, at step 207, the column j in which that 
non-zero element is found with column u (except if j = u), in order to for this 
element to serve as Gauss pivot at position (u,u), and the starting point 200 of 
the sub-algorithm A is returned to, in order to terminate the calculation of S u+1 
by a manipulation involving line (u+1). 

If on the other hand all the elements of the line u are zero up to and 
including that in column v t the sub-algorithm B is proceeded to (step 300). 

Sub-algorithm B, which is represented in Figure 5b, serves 
essentially to go forward by one column in " S " (step 303). 

If it turns out, at the commencement of that sub-algorithm (step 301), 
that all the elements of the line u up to and including that in column w(u) are 
zero, this means in fact that the end of the algorithm has been attained (step 
302): the number X 0 sought is thus equal to the current value of u. 

It should be noted, since at the start I a = 0 for / < X 0 , that the linear 

manipulations involving the lines of L of index / < X 0 do not modify the elements 
of these lines situated in column X 0 . Consequently, in the case of the stop 
criterion 301, the result 1 Xq = L XqXq = 1 is arrived at, since l x x = 1. 

If, on the other hand, v is still less than w(u) t going through of line u 
to the following columns is continued (by increasing v, step 303), to search for 
the first non-zero element (step 304). 

If one is thus found before v becomes equal to w(u), then first, at step 
305, the current value of u is attributed to the variable u*. Thus, the line of 
index u* of S u has a non-zero element in its column v, but all the elements of 
that line situated in columns 1 to are zero. Thus at this stage the matrix L 
satisfies: 
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2^/^=0, fory= 1,2 (v^1) , (5) 

7=1 

where L^*, in particular, is equal to 1. 

Next, at step 306, the calculation of the matrix S u+1 is commenced 
exchanging the column v with column u (except if v = u), in order for the non- 
5 zero element found at step 304 to serve as Gauss pivot at position (u,u), and 
sub-algorithm A is returned to, in order to terminate the calculation of S u+1 by a 
manipulation involving line (u+1). 

We now return to the stop criterion 202. If v > w{u), it is thereby 
deduced that the number X 0 sought is equal to the current value of u, and thus: 
10 v-1 > w(X 0 ). This is because, if step 305 which preceded that step 202 is 
returned to, it is found that the elements of the line u* of S u * were zero at least 
from column 1 to column w(X 0 ). Taking equation (5) into account it can be seen 
that if we take: 

1 1 = Lu*\ for / = 1,2,... ,a* , and 

15 l t = 0 for/= (u*+1), ... f Xo , 

we have actually obtained a non-trivial solution to the system of equations (1), 
where Xq corresponds to the minimum value of u for which such a solution 
exists. It will be noted that, in the case of the stop criterion 202, the result l u * = 
L u * u * - 1 is arrived at. Note also that in this case it has not been necessary to 

20 calculate the line S[X 0 ]. 

According to a second embodiment of the present invention, the 
"extended dimension" X D concerned by the extended modified algorithm is 
determined. The steps of this variant form of the invention are essentially the 
same as the steps of the embodiment described above, apart from the fact that 

25 (the case arising) v is not incremented beyond w(\i D ) ; thus, the stop criterion 
202 becomes: v > min (w(w),vi/(|id)), and the stop criterion 301 becomes : v = 
min (w(u),w/(ju, D )) (where "min" designates the minimum). As mentioned by way 
of introduction, this variant of the algorithm according to the invention allows a 
saving to be made in terms of storage. For example, for the code considered 
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above, |a D = 7 is found; as w(7) = 20, we will have w(X D ) < 20, such that only 
the first 20 columns of the matrix S will be needed. 

Whatever the embodiment of the invention, its results may be applied 
to the correction of transmission errors in the word considered as if the modified 
5 basic algorithm or the extended modified algorithm had been implemented. For 
example, according to a known method of error correction, the following "error- 
locating polynomial' 1 will be formed: 
x 

7=1 

the roots of which serve to find the position of the errors in the received word 
10 (for further details, reference may be made for example to the article by Tom 
Hoholdt and Ruud Pellikaan cited above. It will be noted that, with X fixed, the 
set of associated coefficients is not unique; for example, it is clearly possible 
here to multiply all the numbers /, by the same constant without this affecting 
the location of the transmission errors. 
15 The block diagram of Figure 6 represents an apparatus for receiving 

digital signals 70 incorporating the decoder 10. This apparatus 70 comprises a 
keyboard 711, a screen 709, a recipient of external information 109, a data 
reader 105 and a demodulator 106, conjointly connected to input/output ports 
703 of the decoder 10 which is produced here in the form of a logic unit. 
20 The decoder 10 comprises, connected together by an address and 

data bus 702: 

- a central processing unit 700, 

- a random access memory (RAM) 704, 

- read only memory (ROM) 705; and 
25 - said input/output ports 703. 

Each of the elements illustrated in Figure 6 is well known to the 
person skilled in the art of microcomputers and mass storage systems and, 
more generally, of information processing systems. These known elements are 
therefore not described here. It should be noted, however, that: 
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- the information recipient 109 could, for example, be an interface 
peripheral, a display, a modulator, an external memory or other information 
processing system (not shown), and could be adapted to receive sequences of 
signals representing speech, service messages or multimedia data in particular 

5 of the IP or ATM type, in the form of sequences of binary data, 

- the reader 105 is adapted to read data recorded on a carrier such as a 
magnetic or magneto-optic disk. 

The random access memory 704 stores data, variables and 
intermediate processing results, in memory registers bearing, in the description, 
10 the same names as the data whose values they store. The random access 
memory 704 contains in particular the following registers: 

- registers " received jwords" y in which the received words are kept, 

- a register "estimated_symbols" in which are stored the symbols from 
a received word in course of correction, 

15 - a register "associated_words" , in which are stored the symbols of the 

"associated code words", and 

- a register "information_symbols", in which are stored the symbols 
resulting from the redundancy suppression. 

The read only memory 705 is adapted to store, in registers which, for 
20 convenience, have the same names as the data which they store: 

- the operating program of the central processing unit 700, in a register 
"program", 

- the length of each code word in a register "n", 

- the number of information symbols in each code word, in a register 

25 "A", 

- the list of the values of w(u) for 1 < u < t/ max , such as illustrated in 
Figure 2, in a register " w % \ 

- the list of the coefficients of the syndromes matrix, such as illustrated 
in Figure 3, in a register " S ", and 

30 - the length of the parity matrix of the code, in a register " H ", 

An application of the invention to the mass storage of data has been 
described above by way of example, but it is clear that the methods according 
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to the invention may equally well be implemented within a telecommunications 
network, in which case unit 105 could for example be a receiver adapted to 
implement a protocol for data packet transmission over a radio channel. 



